# Third-party notices

vm.riyo.me includes or distributes third-party software. Copyright remains with
the respective authors. Full dependency metadata is published in
`public/legal/node-dependencies.json` and `public/legal/sbom.cdx.json`.

- v86 — BSD 2-Clause; Copyright the v86 contributors. The complete notice is
  distributed at `/runtime/v86/LICENSE.txt`.
- SeaBIOS and VGA BIOS — GNU LGPL; the distributed license text is at
  `/bios/COPYING.LESSER`.
- Linux Workspace — built from Alpine Linux, Linux, BusyBox and Alpine userland packages;
  see `OS_IMAGE_LICENSES.json` and `SOURCE_OFFER.md`.
- FreeDOS — FreeDOS is free software distributed by the FreeDOS Project. See
  the image manifest and source links in `OS_IMAGE_LICENSES.json`.
- KolibriOS — KolibriOS is free software under GPLv2. See the image manifest and
  source links in `OS_IMAGE_LICENSES.json`.

The GNU GPL 2.0, LGPL 2.1, and GPL 3.0 license texts are distributed under
`/legal/licenses/`.

JavaScript libraries include React, Next.js, CodeMirror, xterm.js, fflate,
idb, Lucide, PDF.js, Zod and Zustand under their respective open-source
licenses. This notice does not replace their license texts.